156-315.80無料問題集「CheckPoint Check Point Certified Security Expert

質問 1

Which is not a blade option when configuring SmartEvent?

（A）Log Server

（B）Correlation Unit

（C）SmartEvent Unit

（D）SmartEvent Server

正解：C 解答を投票する

解説: (JPNTest メンバーにのみ表示されます)

質問 2

Tom has connected to the R80 Management Server remotely using SmartConsole and is in the process of making some Rule Base changes, when he suddenly loses connectivity. Connectivity is restored shortly afterward.
What will happen to the changes already made?

（A）Tom's changes will have been stored on the Management when he reconnects and he will not lose any of his work.

（B）Tom will have to reboot his SmartConsole computer, clear to cache, and restore changes.

（C）Tom's changes will be lost since he lost connectivity and he will have to start again.

（D）Tom will have to reboot his SmartConsole computer, and access the Management cache store on that computer, which is only accessible after a reboot.

正解：A 解答を投票する

質問 3

Both ClusterXL and VRRP are fully supported by Gaia R80.10 and available to all Check Point appliances. Which the following command is NOT related to redundancy and functions?

（A）cphaprob all show stat

（B）cphaprob -a if

（C）cphaprob stat

（D）cphaprob -l list

正解：A 解答を投票する

質問 4

What does the Log "Views" tab show when SmartEvent is Correlating events?

（A）Reports for customization

（B）Top events with charts and graphs

（C）A list of common reports

（D）Details of a selected logs

正解：D 解答を投票する

質問 5

What feature allows Remote-access VPN users to access resources across a site-to-site VPN tunnel?

（A）Remote Access VPN Switch

（B）Network Access VPN Domain

（C）Mobile Access VPN Domain

（D）Specific VPN Communities

正解：A 解答を投票する

質問 6

Which option, when applied to a rule, allows traffic to VPN gateways in specific VPN communities?

（A）All Site-to-Site VPN Communities

（B）All Connections (Clear or Encrypted)

（C）Accept all encrypted traffic

（D）Specific VPN Communities

正解：C 解答を投票する

質問 7

Which Check Point daemon monitors the other daemons?

（A）fwm

（B）cpwd

（C）fwssd

（D）cpd

正解：B 解答を投票する

質問 8

In what way are SSL VPN and IPSec VPN different?

（A）SSL VPN adds an extra VPN header to the packet, IPSec VPN does not

（B）IPSec VPN does not support two factor authentication, SSL VPN does support this

（C）IPSec VPN uses an additional virtual adapter; SSL VPN uses the client network adapter only.

（D）SSL VPN is using HTTPS in addition to IKE, whereas IPSec VPN is clientless

正解：C 解答を投票する

質問 9

Which of the following Check Point processes within the Security Management Server is responsible for the receiving of log records from Security Gateway?

（A）fwd

（B）fwm

（C）logd

（D）cpd

正解：A 解答を投票する

質問 10

Besides fw monitor, what is another command that can be used to capture packets?

（A）tcpdump

（B）traceroute

（C）ping

（D）arp

正解：A 解答を投票する

質問 11

UserCheck objects in the Application Control and URL Filtering rules allow the gateway to communicate with the users. Which action is not supported in UserCheck objects?

（A）Ask

（B）Reject

（C）Drop

（D）Inform

正解：B 解答を投票する

質問 12

Which one of the following is true about Capsule Connect?

（A）It is supported only on iOS phones and Windows PCs

（B）It offers full enterprise mobility management

（C）It is a full layer 3 VPN client

（D）It does not support all VPN authentication methods

正解：C 解答を投票する

質問 13

Which of the following is NOT a type of Check Point API available in R80.x?

（A）Mobile Access

（B）OPSEC SDK

（C）Management

（D）Identity Awareness Web Services

正解：A 解答を投票する

質問 14

In R80, where do you manage your Mobile Access Policy?

（A）Shared Gateways Policy

（B）Access Control Policy

（C）From the Dedicated Mobility Tab

（D）Through the Mobile Console

正解：B 解答を投票する

質問 15

Which of the SecureXL templates are enabled by default on Security Gateway?

（A）NAT

（B）None

（C）Drop

（D）Accept

正解：B 解答を投票する

質問 16

What is not a component of Check Point SandBlast?

（A）Threat Simulator

（B）Threat Emulation

（C）Threat Cloud

（D）Threat Extraction

正解：A 解答を投票する

質問 17

What is true of the API server on R80.10?

（A）By default the API-server is activated and does not have hardware requirements.

（B）By default, the API server is active on management servers with 4 GB of RAM (or more) and on stand-alone servers with 8GB of RAM (or more).

（C）By default the API-server is not active and should be activated from the WebUI.

（D）By default the API server is active on management and stand-alone servers with 16GB of RAM (or more).

正解：B 解答を投票する

質問 18

You are investigating issues with to gateway cluster members are not able to establish the first initial cluster synchronization. What service is used by the FWD daemon to do a Full Synchronization?

（A）TCP port 256

（B）UDP port 8116

（C）TCP port 443

（D）TCP port 257

正解：A 解答を投票する

156-315.80 無料問題集「CheckPoint Check Point Certified Security Expert - R80」

弊社を連絡する

関連リンク

トップ試験